Hacker News new | ask | show | jobs
by thenewnewguy 2427 days ago
Doesn't prevent a malicious/compromised third party from serving code other than what's in the source. I think an acceptable mitigation might be subresource integrity though, so you can lock it to a known-good version of a script?